agentenkit 0.4.0 → 0.5.0

package/dist/core/builtin/sandbox-tools.js

@@ -0,0 +1,389 @@
+import { createHash } from 'node:crypto';
+import { SandboxFileNotFoundError } from '../../ports/sandbox.js';
+import { parkForInput } from '../hitl.js';
+import { publishEvent } from '../publish.js';
+import { recordToolUsage, toolUseRow } from './run.js';
+import { withThreadSandbox } from './sandbox.js';
+/** Where the tools keep their own files, in the sandbox's work folder: the
+ *  bash folder, the programs code_execution ran, the editor's undo history.
+ *  Hidden, so a plain `ls` does not show it. */
+const STATE_DIR = '.agentenkit';
+/** Changes the editor can take back, per file. */
+const UNDO_DEPTH = 10;
+const LOST_NOTE = "The sandbox this conversation used before has ended, so files from earlier are gone. This is a fresh one.";
+const failed = (error, note) => (note ? { error, note } : { error });
+/** Count one use and say whether it is over the run's limit. */
+async function overLimit(run, tool, maxUses) {
+    if (!maxUses)
+        return false;
+    const scope = run.runId ?? run.threadId;
+    const ttl = Math.ceil(run.deps.config.hitlTtlMs / 1000) + 24 * 60 * 60;
+    return (await run.deps.kv.incrWithExpiry(`agent:tool:uses:${scope}:${tool}`, ttl)) > maxUses;
+}
+/** Ask for approval when the rule says so and this call is not already
+ *  the approved one coming back. */
+async function needsApproval(rule, input, opts) {
+    if (opts.approval)
+        return false;
+    return typeof rule === 'function' ? Boolean(await rule(input)) : rule;
+}
+/** Text over `max` UTF-16 units keeps its start and its end, with a line
+ *  saying how much was cut from the middle: the start says what ran, the end
+ *  holds the error. Never splits a character. The Go runtime cuts the same. */
+export function cutMiddle(text, max) {
+    if (text.length <= max)
+        return { text, cut: false };
+    let head = Math.floor(max / 2);
+    let tail = text.length - (max - head);
+    if (isHigh(text.charCodeAt(head - 1)))
+        head--;
+    if (isLow(text.charCodeAt(tail)))
+        tail++;
+    return { text: `${text.slice(0, head)}\n… ${tail - head} characters cut …\n${text.slice(tail)}`, cut: true };
+}
+const isHigh = (c) => c >= 0xd800 && c <= 0xdbff;
+const isLow = (c) => c >= 0xdc00 && c <= 0xdfff;
+/** Output as it comes, on the thread as live-only `tool.output` events, a
+ *  few at a time so a chatty command does not flood the bus. */
+function liveOutput(run, tool, toolCallId) {
+    let buf = [];
+    let timer;
+    let chain = Promise.resolve();
+    const flush = () => {
+        timer = undefined;
+        if (buf.length === 0)
+            return;
+        const parts = buf;
+        buf = [];
+        for (const stream of ['stdout', 'stderr']) {
+            const text = parts.filter((p) => p.stream === stream).map((p) => p.text).join('');
+            if (!text)
+                continue;
+            const payload = { toolCallId: toolCallId ?? null, tool, stream, text, ...(run.agentId ? { agentId: run.agentId } : {}) };
+            chain = chain.then(() => publishEvent(run.deps, run.threadId, 'tool.output', payload)).catch(() => undefined);
+        }
+    };
+    const push = (stream) => (text) => {
+        buf.push({ stream, text });
+        timer ??= setTimeout(flush, 100);
+    };
+    return {
+        onStdout: push('stdout'),
+        onStderr: push('stderr'),
+        done: async () => {
+            if (timer)
+                clearTimeout(timer);
+            flush();
+            await chain;
+        },
+    };
+}
+function capOutput(run, r) {
+    const max = run.deps.config.builtinToolResultCapChars;
+    const out = cutMiddle(r.stdout, max);
+    const err = cutMiddle(r.stderr, max);
+    return { stdout: out.text, stderr: err.text, truncated: Boolean(r.truncated || out.cut || err.cut) };
+}
+const seconds = (ms) => Math.round(ms) / 1000;
+// --- bash -----------------------------------------------------------------
+/** The folder a bash call ends in is kept in the sandbox, and the next call
+ *  starts there: the "session" the model expects, without a shell that has
+ *  to outlive the process. */
+function bashScript(command, restart) {
+    return [
+        `__ak="$PWD/${STATE_DIR}"; mkdir -p "$__ak"`,
+        ...(restart ? ['rm -f "$__ak/bash-cwd"'] : []),
+        `if [ -f "$__ak/bash-cwd" ]; then cd -- "$(cat "$__ak/bash-cwd")" 2>/dev/null; fi`,
+        `trap 'pwd > "$__ak/bash-cwd"' EXIT`,
+        command,
+        // Saved again here, for a command that set its own EXIT trap in place
+        // of ours; the trap still covers one that calls exit.
+        '__ec=$?',
+        'pwd > "$__ak/bash-cwd"',
+        'exit $__ec',
+    ].join('\n');
+}
+export async function runBash(options, input, run, opts) {
+    const command = typeof input.command === 'string' ? input.command : '';
+    const restart = input.restart === true;
+    if (!command.trim() && !restart)
+        return failed('bash: command is required');
+    if (await needsApproval(options.approval ?? true, input, opts))
+        throw parkForInput({ payload: input });
+    if (await overLimit(run, 'bash', options.maxUses))
+        return failed(`bash: this run has used its ${options.maxUses} commands`);
+    const live = liveOutput(run, 'bash', opts.toolCallId);
+    try {
+        return await withThreadSandbox(run, async ({ sandbox, lost }) => {
+            const r = await sandbox.runCommand(bashScript(command || ':', restart), {
+                timeoutMs: options.timeoutMs ?? 120_000,
+                onStdout: live.onStdout,
+                onStderr: live.onStderr,
+                ...(opts.abortSignal ? { signal: opts.abortSignal } : {}),
+            });
+            await recordToolUsage(run, toolUseRow('bash', sandbox.provider, 1, seconds(r.durationMs)));
+            const out = capOutput(run, r);
+            return {
+                stdout: out.stdout,
+                stderr: out.stderr,
+                exitCode: r.exitCode,
+                ...(out.truncated ? { truncated: true } : {}),
+                ...(r.timedOut ? { timedOut: true, error: `bash: the command was stopped after ${seconds(options.timeoutMs ?? 120_000)} s` } : {}),
+                ...(lost ? { note: LOST_NOTE } : {}),
+            };
+        });
+    }
+    finally {
+        await live.done();
+    }
+}
+// --- code_execution -------------------------------------------------------
+const RUNNERS = {
+    // No __pycache__, which would show up among the files the program made;
+    // -u sends the output as it prints, not when it ends, so it streams live.
+    python: { ext: 'py', run: 'PYTHONDONTWRITEBYTECODE=1 python3 -u' },
+    javascript: { ext: 'js', run: 'node' },
+};
+/** The media type of a file the program made, from its name. */
+export function mediaTypeOf(path) {
+    const ext = path.slice(path.lastIndexOf('.') + 1).toLowerCase();
+    return {
+        png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif', webp: 'image/webp',
+        svg: 'image/svg+xml', pdf: 'application/pdf', csv: 'text/csv', json: 'application/json',
+        txt: 'text/plain', md: 'text/markdown', html: 'text/html',
+    }[ext] ?? 'application/octet-stream';
+}
+export async function runCodeExecution(options, input, run, opts) {
+    const code = typeof input.code === 'string' ? input.code : '';
+    if (!code.trim())
+        return failed('code_execution: code is required');
+    const language = input.language ?? 'python';
+    const runner = RUNNERS[language];
+    if (!runner)
+        return failed(`code_execution: language must be python or javascript, not ${JSON.stringify(language)}`);
+    if (await needsApproval(options.approval ?? false, input, opts))
+        throw parkForInput({ payload: input });
+    if (await overLimit(run, 'code_execution', options.maxUses)) {
+        return failed(`code_execution: this run has used its ${options.maxUses} runs`);
+    }
+    const limit = options.timeoutMs ?? 60_000;
+    const live = liveOutput(run, 'code_execution', opts.toolCallId);
+    try {
+        return await withThreadSandbox(run, async ({ sandbox, lost }) => {
+            const name = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+            const file = `${STATE_DIR}/code/${name}.${runner.ext}`;
+            await sandbox.filesystem.writeFile(file, code);
+            // A marker made just before the run: the files newer than it are the
+            // ones the program made or changed.
+            // The program is read from stdin, so its imports (Python) and relative
+            // requires (Node) resolve from the work folder, not the hidden one.
+            const script = [
+                `touch "${STATE_DIR}/code/${name}.start"`,
+                `${runner.run} - < "${file}"`,
+                '__ec=$?',
+                `find . -path "./${STATE_DIR}" -prune -o -type f -newer "${STATE_DIR}/code/${name}.start" -print > "${STATE_DIR}/code/${name}.files" 2>/dev/null`,
+                'exit $__ec',
+            ].join('\n');
+            const r = await sandbox.runCommand(script, {
+                timeoutMs: limit,
+                onStdout: live.onStdout,
+                onStderr: live.onStderr,
+                ...(opts.abortSignal ? { signal: opts.abortSignal } : {}),
+            });
+            await recordToolUsage(run, toolUseRow('code_execution', sandbox.provider, 1, seconds(r.durationMs)));
+            const listed = await sandbox.filesystem.readFile(`${STATE_DIR}/code/${name}.files`).catch(() => '');
+            const files = listed
+                .split('\n')
+                .map((l) => l.replace(/^\.\//, ''))
+                .filter(Boolean)
+                .sort()
+                .map((path) => ({ path, mediaType: mediaTypeOf(path) }));
+            const out = capOutput(run, r);
+            const error = r.timedOut
+                ? `code_execution: the program was stopped after ${seconds(limit)} s`
+                : r.exitCode !== 0
+                    ? `code_execution: the program exited with code ${r.exitCode}`
+                    : undefined;
+            return {
+                stdout: out.stdout,
+                stderr: out.stderr,
+                exitCode: r.exitCode,
+                ...(error ? { error } : {}),
+                files,
+                ...(out.truncated ? { truncated: true } : {}),
+                ...(lost ? { note: LOST_NOTE } : {}),
+            };
+        });
+    }
+    finally {
+        await live.done();
+    }
+}
+// --- text_editor ----------------------------------------------------------
+const EDITS = new Set(['create', 'str_replace', 'insert', 'undo_edit']);
+/** The editor's undo history for one file: earlier versions, newest last;
+ *  null where the file did not exist yet. */
+const historyPath = (path) => `${STATE_DIR}/history/${createHash('sha256').update(path).digest('hex').slice(0, 32)}.json`;
+async function readHistory(sandbox, path) {
+    try {
+        return JSON.parse(await sandbox.filesystem.readFile(historyPath(path)));
+    }
+    catch {
+        return [];
+    }
+}
+async function remember(sandbox, path, before) {
+    const history = [...(await readHistory(sandbox, path)), before].slice(-UNDO_DEPTH);
+    await sandbox.filesystem.writeFile(historyPath(path), JSON.stringify(history));
+}
+async function readOrNull(sandbox, path) {
+    try {
+        return await sandbox.filesystem.readFile(path);
+    }
+    catch (e) {
+        if (e instanceof SandboxFileNotFoundError)
+            return null;
+        throw e;
+    }
+}
+/** Lines of `text` numbered from `from`, as `cat -n` shows them. */
+function numbered(lines, from) {
+    return lines.map((l, i) => `${String(from + i).padStart(6)}\t${l}`).join('\n');
+}
+/** A folder's contents two levels deep, hidden entries left out; null when
+ *  `path` is not a folder. */
+async function listFolder(sandbox, path) {
+    try {
+        await sandbox.filesystem.readdir(path);
+    }
+    catch (e) {
+        if (e instanceof SandboxFileNotFoundError)
+            return null;
+        throw e;
+    }
+    const out = [];
+    const walk = async (dir, prefix, depth) => {
+        let entries;
+        try {
+            entries = await sandbox.filesystem.readdir(dir);
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (e.name.startsWith('.'))
+                continue;
+            out.push(`${prefix}${e.name}${e.type === 'directory' ? '/' : ''}`);
+            if (e.type === 'directory' && depth < 2)
+                await walk(`${dir}/${e.name}`, `${prefix}${e.name}/`, depth + 1);
+        }
+    };
+    await walk(path, '', 1);
+    return out.join('\n');
+}
+const count = (text, part) => {
+    let n = 0;
+    for (let i = text.indexOf(part); i !== -1; i = text.indexOf(part, i + part.length))
+        n++;
+    return n;
+};
+async function edit(sandbox, run, input) {
+    const path = input.path;
+    const max = run.deps.config.builtinToolResultCapChars;
+    switch (input.command) {
+        case 'view': {
+            // A folder first: reading one as a file fails differently on each
+            // adapter, listing a file fails the same on all.
+            const listing = await listFolder(sandbox, path);
+            if (listing !== null) {
+                const shown = cutMiddle(listing, max);
+                return { path, content: shown.text, ...(shown.cut ? { truncated: true } : {}) };
+            }
+            const text = await readOrNull(sandbox, path);
+            if (text === null)
+                return failed(`text_editor: ${path} does not exist`);
+            const lines = text.split('\n');
+            let [from, to] = input.view_range ?? [1, -1];
+            if (to === -1 || to > lines.length)
+                to = lines.length;
+            if (!Number.isInteger(from) || !Number.isInteger(to) || from < 1 || from > Math.max(lines.length, 1) || to < from) {
+                return failed(`text_editor: view_range must be two line numbers within 1 and ${lines.length}`);
+            }
+            const shown = cutMiddle(numbered(lines.slice(from - 1, to), from), max);
+            return { path, content: shown.text, totalLines: lines.length, ...(shown.cut ? { truncated: true } : {}) };
+        }
+        case 'create': {
+            if (typeof input.file_text !== 'string')
+                return failed('text_editor: create needs file_text');
+            const before = await readOrNull(sandbox, path);
+            await remember(sandbox, path, before);
+            await sandbox.filesystem.writeFile(path, input.file_text);
+            return { ok: true, message: `${before === null ? 'Created' : 'Replaced'} ${path}.` };
+        }
+        case 'str_replace': {
+            if (typeof input.old_str !== 'string' || input.old_str === '')
+                return failed('text_editor: str_replace needs old_str');
+            const text = await readOrNull(sandbox, path);
+            if (text === null)
+                return failed(`text_editor: ${path} does not exist`);
+            const n = count(text, input.old_str);
+            if (n === 0)
+                return failed(`text_editor: old_str was not found in ${path}; it must match exactly, whitespace included`);
+            if (n > 1)
+                return failed(`text_editor: old_str matches ${n} places in ${path}; include more of the text around it so it matches one`);
+            await remember(sandbox, path, text);
+            const i = text.indexOf(input.old_str);
+            await sandbox.filesystem.writeFile(path, text.slice(0, i) + (input.new_str ?? '') + text.slice(i + input.old_str.length));
+            return { ok: true, message: `Replaced 1 place in ${path}.` };
+        }
+        case 'insert': {
+            if (typeof input.new_str !== 'string')
+                return failed('text_editor: insert needs new_str');
+            const text = await readOrNull(sandbox, path);
+            if (text === null)
+                return failed(`text_editor: ${path} does not exist`);
+            const lines = text.split('\n');
+            const at = input.insert_line;
+            if (!Number.isInteger(at) || at < 0 || at > lines.length) {
+                return failed(`text_editor: insert_line must be within 0 and ${lines.length}`);
+            }
+            await remember(sandbox, path, text);
+            lines.splice(at, 0, ...input.new_str.split('\n'));
+            await sandbox.filesystem.writeFile(path, lines.join('\n'));
+            return { ok: true, message: `Inserted after line ${at} of ${path}.` };
+        }
+        case 'undo_edit': {
+            const history = await readHistory(sandbox, path);
+            if (history.length === 0)
+                return failed(`text_editor: there is no change to ${path} to undo`);
+            const before = history.pop();
+            if (before === null)
+                await sandbox.filesystem.remove(path);
+            else
+                await sandbox.filesystem.writeFile(path, before);
+            await sandbox.filesystem.writeFile(historyPath(path), JSON.stringify(history));
+            return { ok: true, message: before === null ? `Removed ${path}, which the change had created.` : `Undid the last change to ${path}.` };
+        }
+        default:
+            return failed('text_editor: command must be view, create, str_replace, insert or undo_edit');
+    }
+}
+export async function runTextEditor(options, input, run, opts) {
+    if (typeof input.command !== 'string' || !['view', ...EDITS].includes(input.command)) {
+        return failed('text_editor: command must be view, create, str_replace, insert or undo_edit');
+    }
+    if (typeof input.path !== 'string' || !input.path.trim())
+        return failed('text_editor: path is required');
+    const rule = options.approval ?? ((i) => EDITS.has(i.command ?? ''));
+    if (await needsApproval(rule, input, opts))
+        throw parkForInput({ payload: input });
+    if (await overLimit(run, 'text_editor', options.maxUses)) {
+        return failed(`text_editor: this run has used its ${options.maxUses} edits and views`);
+    }
+    return withThreadSandbox(run, async ({ sandbox, lost }) => {
+        const result = await edit(sandbox, run, input);
+        await recordToolUsage(run, toolUseRow('text_editor', sandbox.provider, 1, 0));
+        return lost ? { ...result, note: LOST_NOTE } : result;
+    });
+}
+//# sourceMappingURL=sandbox-tools.js.map

package/dist/core/builtin/sandbox-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-tools.js","sourceRoot":"","sources":["../../../src/core/builtin/sandbox-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAgC,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAgB,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAsB,MAAM,cAAc,CAAC;AAuDrE;;gDAEgD;AAChD,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,kDAAkD;AAClD,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,SAAS,GACb,2GAA2G,CAAC;AAE9G,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtF,gEAAgE;AAChE,KAAK,UAAU,SAAS,CAAC,GAAY,EAAE,IAAY,EAAE,OAA2B;IAC9E,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACvE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,mBAAmB,KAAK,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;AAC/F,CAAC;AAED;oCACoC;AACpC,KAAK,UAAU,aAAa,CAAI,IAAqB,EAAE,KAAQ,EAAE,IAA4B;IAC3F,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED;;+EAE+E;AAC/E,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,sBAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC/G,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC;AACzD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC;AAExD;gEACgE;AAChE,SAAS,UAAU,CAAC,GAAY,EAAE,IAAY,EAAE,UAA8B;IAC5E,IAAI,GAAG,GAAyD,EAAE,CAAC;IACnE,IAAI,KAAgD,CAAC;IACrD,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,KAAK,GAAG,SAAS,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,GAAG,GAAG,EAAE,CAAC;QACT,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,UAAU,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACzH,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAA2B,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3B,KAAK,KAAK,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,CAA0D;IACzF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC;IACtD,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;AAEtD,6EAA6E;AAE7E;;8BAE8B;AAC9B,SAAS,UAAU,CAAC,OAAe,EAAE,OAAgB;IACnD,OAAO;QACL,cAAc,SAAS,qBAAqB;QAC5C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,kFAAkF;QAClF,oCAAoC;QACpC,OAAO;QACP,sEAAsE;QACtE,sDAAsD;QACtD,SAAS;QACT,wBAAwB;QACxB,YAAY;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,OAAoB,EACpB,KAAgB,EAChB,GAAY,EACZ,IAA4E;IAE5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC5E,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvG,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,+BAA+B,OAAO,CAAC,OAAO,WAAW,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9D,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,CAAC,EAAE;gBACtE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,uCAAuC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,OAAO,GAAG;IACd,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,sCAAsC,EAAE;IAClE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;CAC9B,CAAC;AAEX,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OACE;QACE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY;QAC7F,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB;QACvF,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW;KAE5D,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA6B,EAC7B,KAAyB,EACzB,GAAY,EACZ,IAA4E;IAE5E,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,8DAA8D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrH,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACxG,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,yCAAyC,OAAO,CAAC,OAAO,OAAO,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,GAAG,SAAS,SAAS,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACvD,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,qEAAqE;YACrE,oCAAoC;YACpC,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,MAAM,GAAG;gBACb,UAAU,SAAS,SAAS,IAAI,SAAS;gBACzC,GAAG,MAAM,CAAC,GAAG,SAAS,IAAI,GAAG;gBAC7B,SAAS;gBACT,mBAAmB,SAAS,+BAA+B,SAAS,SAAS,IAAI,qBAAqB,SAAS,SAAS,IAAI,qBAAqB;gBACjJ,YAAY;aACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;gBACzC,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,SAAS,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACpG,MAAM,KAAK,GAAG,MAAM;iBACjB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;iBAClC,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ;gBACtB,CAAC,CAAC,iDAAiD,OAAO,CAAC,KAAK,CAAC,IAAI;gBACrE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC;oBAChB,CAAC,CAAC,gDAAgD,CAAC,CAAC,QAAQ,EAAE;oBAC9D,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,KAAK;gBACL,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAExE;6CAC6C;AAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CACnC,GAAG,SAAS,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;AAE9F,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAY;IACvD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAyB,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAY,EAAE,MAAqB;IAC3E,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACnF,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAY;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,wBAAwB;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,KAAe,EAAE,IAAY;IAC7C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED;8BAC8B;AAC9B,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,wBAAwB;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;QAChE,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;IAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAAE,CAAC,EAAE,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,OAAgB,EAAE,GAAY,EAAE,KAAsB;IACxE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAK,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC;IACtD,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,kEAAkE;YAClE,iDAAiD;YACjD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAClF,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM;gBAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClH,OAAO,MAAM,CAAC,iEAAiE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5G,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,qCAAqC,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,GAAG,EAAE,CAAC;QACvF,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE;gBAAE,OAAO,MAAM,CAAC,wCAAwC,CAAC,CAAC;YACvH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,yCAAyC,IAAI,8CAA8C,CAAC,CAAC;YACxH,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,gCAAgC,CAAC,cAAc,IAAI,wDAAwD,CAAC,CAAC;YACtI,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,IAAI,GAAG,EAAE,CAAC;QAC/D,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,mCAAmC,CAAC,CAAC;YAC1F,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAG,GAAG,CAAC,IAAI,EAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3D,OAAO,MAAM,CAAC,iDAAiD,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,EAAG,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,sCAAsC,IAAI,UAAU,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;YAC9B,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;gBACtD,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,iCAAiC,CAAC,CAAC,CAAC,4BAA4B,IAAI,GAAG,EAAE,CAAC;QACzI,CAAC;QACD;YACE,OAAO,MAAM,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA0B,EAC1B,KAAsB,EACtB,GAAY,EACZ,IAA4B;IAE5B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrF,OAAO,MAAM,CAAC,6EAA6E,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,MAAM,CAAC,sCAAsC,OAAO,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAiB,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/builtin/sandbox.d.ts

@@ -0,0 +1,52 @@
+import type { RuntimePorts } from '../../ports/runtime.js';
+import { type Sandbox } from '../../ports/sandbox.js';
+import { type ToolRun } from './run.js';
+/** One sandbox per thread, kept between messages.
+ *
+ *  The first sandbox call in a thread makes it and keeps its id in the kv
+ *  under the thread. Every later call, in this run or the next (a new
+ *  message, a resume after an approval, a retry, another worker), connects to
+ *  the same one, so files stay. The run lock means one run at a time uses it;
+ *  a run's subagents share it, as they share the thread.
+ *
+ *  It ends when the thread is deleted, when it has sat idle past
+ *  `sandboxIdleTtlMs`, or at `sandboxMaxLifetimeMs` after it was made. Each
+ *  use pushes the sandbox's own timeout back, so an idle one shuts itself
+ *  down even when no app is running to end it. The next call then makes a
+ *  fresh one and says the old files are lost. The Go runtime does the same
+ *  (core/sandbox.go). */
+export interface ThreadSandbox {
+    sandbox: Sandbox;
+    /** True when this call made the sandbox. */
+    created: boolean;
+    /** True when the thread had a sandbox that is gone now: idle too long,
+     *  past its lifetime, or ended on its own. Its files are lost, and a tool
+     *  should tell the model so it does not expect them. */
+    lost: boolean;
+}
+export declare const sandboxKey: (threadId: string) => string;
+/** The thread's sandbox, for a tool you write yourself. Pass the options
+ *  your tool's `execute` was given:
+ *
+ *    execute: async ({ path }, opts) => {
+ *      const { sandbox } = await sandboxFor(opts);
+ *      return sandbox.filesystem.readFile(path);
+ *    }
+ */
+export declare function sandboxFor(toolOptions: unknown): Promise<ThreadSandbox>;
+/** Runs `fn` on the thread's sandbox. When the sandbox turns out to be gone
+ *  part way (it ended on its own), a fresh one is made and `fn` runs once
+ *  more, told `lost: true`:
+ *
+ *    execute: (args, opts) => withSandbox(opts, ({ sandbox, lost }) => ...)
+ */
+export declare function withSandbox<T>(toolOptions: unknown, fn: (ts: ThreadSandbox) => Promise<T>): Promise<T>;
+export declare function withThreadSandbox<T>(run: ToolRun, fn: (ts: ThreadSandbox) => Promise<T>): Promise<T>;
+export declare function threadSandbox(run: ToolRun): Promise<ThreadSandbox>;
+/** Drops every handle this process holds, as a fresh worker would start.
+ *  @internal For tests. */
+export declare function forgetSandboxHandles(): void;
+/** Ends the thread's sandbox, when it has one. Part of deleting a thread;
+ *  never throws, since the thread is gone either way. */
+export declare function destroyThreadSandbox(deps: RuntimePorts, threadId: string): Promise<void>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/core/builtin/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/core/builtin/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAA6C,KAAK,OAAO,EAAwB,MAAM,wBAAwB,CAAC;AACvH,OAAO,EAAa,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAEnD;;;;;;;;;;;;;yBAayB;AAEzB,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB;;4DAEwD;IACxD,IAAI,EAAE,OAAO,CAAC;CACf;AAUD,eAAO,MAAM,UAAU,GAAI,UAAU,MAAM,WAAqC,CAAC;AAejF;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAIvE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAItG;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAc1G;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CASlE;AAgED;2BAC2B;AAC3B,wBAAgB,oBAAoB,SAEnC;AAgBD;yDACyD;AACzD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9F"}

package/dist/core/builtin/sandbox.js

@@ -0,0 +1,174 @@
+import { SandboxGoneError, SandboxUnsupportedError } from '../../ports/sandbox.js';
+import { toolRunOf } from './run.js';
+export const sandboxKey = (threadId) => `agent:tool:sandbox:${threadId}`;
+/** A sandbox's own timeout is pushed back at most this often, and set this
+ *  much past the idle limit so it never ends before the runtime counts it as
+ *  idle. */
+const PUSH_EVERY_MS = 60_000;
+/** Handles this process already holds, by sandbox id, so a call does not
+ *  reconnect every time. */
+const handles = new Map();
+const MAX_HANDLES = 1_000;
+/** Calls under way, by thread: parallel subagents get one sandbox, not one
+ *  each. */
+const pending = new Map();
+/** The thread's sandbox, for a tool you write yourself. Pass the options
+ *  your tool's `execute` was given:
+ *
+ *    execute: async ({ path }, opts) => {
+ *      const { sandbox } = await sandboxFor(opts);
+ *      return sandbox.filesystem.readFile(path);
+ *    }
+ */
+export function sandboxFor(toolOptions) {
+    const run = toolRunOf(toolOptions);
+    if (!run)
+        return Promise.reject(new Error('sandboxFor: this tool is not running inside an agentenkit run'));
+    return threadSandbox(run);
+}
+/** Runs `fn` on the thread's sandbox. When the sandbox turns out to be gone
+ *  part way (it ended on its own), a fresh one is made and `fn` runs once
+ *  more, told `lost: true`:
+ *
+ *    execute: (args, opts) => withSandbox(opts, ({ sandbox, lost }) => ...)
+ */
+export function withSandbox(toolOptions, fn) {
+    const run = toolRunOf(toolOptions);
+    if (!run)
+        return Promise.reject(new Error('withSandbox: this tool is not running inside an agentenkit run'));
+    return withThreadSandbox(run, fn);
+}
+export async function withThreadSandbox(run, fn) {
+    const ts = await threadSandbox(run);
+    try {
+        return await fn(ts);
+    }
+    catch (e) {
+        if (!(e instanceof SandboxGoneError))
+            throw e;
+        handles.delete(ts.sandbox.sandboxId);
+        // Only while the record still names the sandbox that is gone: a parallel
+        // call may already have made the next one.
+        const key = sandboxKey(run.threadId);
+        const raw = await run.deps.kv.get(key);
+        if (parse(raw)?.id === ts.sandbox.sandboxId)
+            await run.deps.kv.delIfValue(key, raw);
+        return fn({ ...(await threadSandbox(run)), lost: true });
+    }
+}
+export function threadSandbox(run) {
+    const provider = run.deps.tools?.sandbox;
+    if (!provider)
+        return Promise.reject(new Error('No sandbox: pass setupAgentCore({ tools: { sandbox } })'));
+    const key = run.threadId;
+    const inFlight = pending.get(key);
+    if (inFlight)
+        return inFlight;
+    const p = acquire(run, provider).finally(() => pending.delete(key));
+    pending.set(key, p);
+    return p;
+}
+async function acquire(run, provider) {
+    const { kv, config } = run.deps;
+    const idle = config.sandboxIdleTtlMs;
+    const lifetime = config.sandboxMaxLifetimeMs;
+    const now = Date.now();
+    let rec = parse(await kv.get(sandboxKey(run.threadId)));
+    // A sandbox from another adapter cannot be reached from this one.
+    if (rec && rec.provider !== provider.name)
+        rec = null;
+    let lost = false;
+    if (rec && (now - rec.lastUsedAt > idle || now - rec.createdAt > lifetime)) {
+        await destroyQuietly(run.deps, provider, rec.id);
+        rec = null;
+        lost = true;
+    }
+    let sandbox;
+    let created = false;
+    if (rec) {
+        try {
+            sandbox = await connect(provider, rec.id);
+            const held = handles.get(rec.id);
+            if (now - held.pushedAt >= PUSH_EVERY_MS) {
+                await sandbox.setTimeout(Math.min(idle + PUSH_EVERY_MS, lifetime - (now - rec.createdAt))).catch((e) => {
+                    if (!(e instanceof SandboxUnsupportedError))
+                        throw e;
+                });
+                held.pushedAt = now;
+            }
+            rec.lastUsedAt = now;
+        }
+        catch (e) {
+            if (!(e instanceof SandboxGoneError))
+                throw e;
+            handles.delete(rec.id);
+            rec = null;
+            lost = true;
+        }
+    }
+    if (!rec) {
+        sandbox = await provider.create({
+            timeoutMs: Math.min(idle + PUSH_EVERY_MS, lifetime),
+            metadata: {
+                threadId: run.threadId,
+                ...(run.runId ? { runId: run.runId } : {}),
+                ...(run.state ? { state: run.state } : {}),
+            },
+        });
+        remember(sandbox, now);
+        rec = { id: sandbox.sandboxId, provider: provider.name, createdAt: now, lastUsedAt: now };
+        created = true;
+    }
+    await kv.set(sandboxKey(run.threadId), JSON.stringify(rec), { exSeconds: Math.ceil(lifetime / 1000) });
+    return { sandbox: sandbox, created, lost };
+}
+async function connect(provider, id) {
+    const held = handles.get(id);
+    if (held)
+        return held.sandbox;
+    const sandbox = await provider.connect(id);
+    // A fresh handle pushes the timeout on its first use.
+    remember(sandbox, 0);
+    return sandbox;
+}
+/** Drops every handle this process holds, as a fresh worker would start.
+ *  @internal For tests. */
+export function forgetSandboxHandles() {
+    handles.clear();
+}
+function remember(sandbox, pushedAt) {
+    if (handles.size >= MAX_HANDLES)
+        handles.delete(handles.keys().next().value);
+    handles.set(sandbox.sandboxId, { sandbox, pushedAt });
+}
+async function destroyQuietly(deps, provider, id) {
+    handles.delete(id);
+    try {
+        await (await provider.connect(id)).destroy();
+    }
+    catch (e) {
+        if (!(e instanceof SandboxGoneError))
+            (deps.log ?? console).error('sandbox not destroyed', { sandboxId: id, err: e });
+    }
+}
+/** Ends the thread's sandbox, when it has one. Part of deleting a thread;
+ *  never throws, since the thread is gone either way. */
+export async function destroyThreadSandbox(deps, threadId) {
+    const provider = deps.tools?.sandbox;
+    const rec = parse(await deps.kv.get(sandboxKey(threadId)).catch(() => null));
+    if (provider && rec && rec.provider === provider.name)
+        await destroyQuietly(deps, provider, rec.id);
+    await deps.kv.del(sandboxKey(threadId)).catch(() => undefined);
+}
+function parse(raw) {
+    if (!raw)
+        return null;
+    try {
+        const r = JSON.parse(raw);
+        return typeof r.id === 'string' && typeof r.provider === 'string' ? r : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=sandbox.js.map